Skill UI

A comprehensive tool for interacting with Notion via its API. It allows users to perform workspace-wide searches, run complex queries against structured databases using compound filters (AND/OR), retrieve specific pages, and deeply traverse and extract all nested block content. Supports pagination for handling large datasets, enabling full data visibility and structured data extraction.

This guide covers essential security protocols for integrating with the Notion API. Learn how to manage integration tokens securely, implement OAuth2 flows, and enforce the principle of least privilege by separating read/write capabilities. It is crucial for developers building robust, secure Notion-powered applications.

This skill provides a seamless workflow for publishing content stored in Obsidian notes to X (Twitter). It intelligently handles both short-form posts (text, images, videos) and rich, long-form articles (X Articles) derived from Markdown. By utilizing a real Chrome browser, it ensures compatibility and bypasses anti-bot detection mechanisms, making it ideal for content creators and knowledge workers who need to automate their social media sharing process from their local knowledge base.

A comprehensive guide and workflow for managing a personal knowledge vault using Obsidian. It details best practices for structuring notes in a flat file system, utilizing index notes, and leveraging wikilinking syntax ([[wikilinks]]) for robust connectivity. Includes command-line methods (grep/find) for efficient searching, note creation, and finding related backlinks across the entire vault, ensuring organized, interconnected learning.

This curriculum covers foundational exploitation techniques essential for binary security analysis. Users will learn to control program execution flow, including overwriting EIP/RIP, constructing ROP chains, implementing ret2libc, and shellcode injection. It provides practical, hands-on exercises on stack overflows and heap manipulation in a controlled Linux environment, establishing the core primitives needed before tackling modern mitigation bypasses.

This comprehensive checklist provides a detailed methodology for simulating the initial access phase in red team engagements and penetration testing. It covers a wide spectrum of modern attack vectors, including advanced social engineering (e.g., deepfake, BEC), sophisticated phishing (spear/smishing), exploiting exposed perimeter services (RDP/VPN), and identifying cloud misconfigurations. Use this guide when planning or executing the initial foothold stage to ensure comprehensive coverage against modern threats.

A comprehensive checklist detailing advanced attack methodologies for JSON Web Tokens (JWT). Covers critical misconfigurations such as algorithm confusion (alg:none, RS256→HS256), weak secret brute forcing, header injection (kid, jku, jwk), cache poisoning, and improper validation. Also provides specific vectors for extracting JWTs from mobile environments (Android/iOS). Ideal for penetration testers conducting deep security assessments on authentication systems.

A comprehensive methodology for offensive security, red team intelligence gathering, and bug bounty reconnaissance. Covers domain recon, email harvesting, social media profiling, code leaks, infrastructure mapping, cryptocurrency tracing, and geospatial intelligence. Essential for building detailed attack-surface maps against organizations or individuals.

A comprehensive, structured framework for conducting sophisticated Open Source Intelligence (OSINT) and cryptocurrency forensic investigations. This guide covers operational security (OpSec), target profiling, advanced transaction tracing across multiple blockchain layers (L1/L2), wallet analysis, and identifying linked digital assets. Use this methodology to guide systematic, multi-dimensional intelligence collection campaigns.

A comprehensive guide to advanced SQL injection (SQLi) methodologies for offensive security assessments and bug bounty hunting. Covers all major injection types, including error-based, boolean/time-based blind, out-of-band, and second-order injection. Provides specific payloads and techniques for MySQL, MSSQL, PostgreSQL, Oracle, and NoSQL databases, along with methods for bypassing WAFs, exploiting GraphQL, WebSocket, and modern API filters. Includes full automation workflows using tools like sqlmap.

This skill provides a comprehensive checklist and methodology for identifying Server-Side Template Injection (SSTI) vulnerabilities. It covers template engine identification (e.g., Jinja2, Twig), polyglot payload generation, systematic detection methods, and executing engine-specific Remote Code Execution (RCE) payloads. Ideal for security professionals testing web application input sanitization.

This comprehensive checklist details advanced methods for bypassing Web Application Firewalls (WAFs) during security assessments. Techniques covered include encoding bypass (URL, Unicode, double encoding), HTTP header manipulation, IP rotation, payload obfuscation, and fingerprinting specific WAF vendors (e.g., Cloudflare, Akamai). It is essential for penetration testers evaluating the robustness of web defenses.